Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2026-0041

NIXPKGS-2026-0041
published on 18 Jan 2026
updated 4 days, 6 hours ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed package moodle-dl
  • @LeSuisse removed maintainer @freezeboy
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
Moodle: password brute force risk when mobile/web services enabled

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

Affected products

moodle
  • <4.4.11
  • <4.5.7
  • <5.0.3
  • <4.1.21

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP